Flows | Ory

📄️ Authorization code flow

OAuth2 and OpenID Connect are widely used authorization and authentication delegation protocols that enable secure access to APIs

OAuth2 is a protocol that allows third-party applications to access a user's data, without having to expose their credentials to

The OAuth 2.0 Device Authorization Grant (RFC 8628) brings OAuth to devices with internet connectivity but limited input

The OAuth 2.0 Resource Owner Password Credentials Grant is an OAuth 2.0 grant where the application exchanges the user's username

In OAuth2 and OpenID Connect (OIDC) protocols, access tokens and ID tokens have an expiration time. When the token expires, the

The OpenID Connect (OIDC) userinfo endpoint is a protected resource that provides information about a user when a service provider

Ory OAuth2 and OpenID Connect allows you to implement:

There are two types of well-known discovery endpoints. The OAuth2.0 and the OpenID Connect (OIDC) discovery endpoints. Both